CVE-2025-12882

CVE-2025-12882 relates to the Clasifico Listing plugin for WordPress. It affects versions up to and including 2.0, where unauthenticated users registering new accounts can set their own role via the listing_user_role parameter, enabling privilege escalation to the administrator role. The CVSS v3....

CVE-2025-12882 Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation

The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing users who are registering new accounts to set their own role by supplying the 'listinguserrole' parameter. This makes it possible for...

WordPress plugin Clasifico Listing 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...